瑞星卡卡电脑诊断日志 v1.30 (2008-9-3 22:48:51) 北京瑞星科技股份有限公司 注释: [A]表示该文件存在自启动关联; [M]表示该文件在内存中; + 注册表自运行项目 + 系统服务 + HKLM\System\CurrentControlSet\Services ose [A ] 1. c:\program files\common files\microsoft shared\source engine\ose.exe Microsoft Corporation Office Source Engine .text,.data,.rsrc, ServiceLayer [A ] 2. c:\program files\common files\pcsuite\services\servicelayer.exe Nokia. ServiceLayer Module .text,.rdata,.data,.rsrc, WMPNetworkSvc [A ] 3. c:\program files\windows media player\wmpnetwk.exe Microsoft Corporation Windows Media Player 网络共享服务 .text,.data,.rsrc,.reloc, WudfSvc [A ] 4. c:\windows\system32\wudfsvc.dll Microsoft Corporation Windows Driver Foundation - User-mode Driver Framework Service .text,.data,.rsrc,.reloc, + 内核驱动 + HKLM\System\CurrentControlSet\Services 203859 [A ] 5. c:\windows\system32\drivers\203859.sys ALCXSENS [A ] 6. c:\windows\system32\drivers\alcxsens.sys Sensaura Ltd Sensaura WDM 3D Audio Driver .text,page,init,.data,init,INIT,.rsrc,.reloc, ALCXWDM [A ] 7. c:\windows\system32\drivers\alcxwdm.sys Realtek Semiconductor Corp. Realtek AC'97 Audio Driver (WDM) .text,.rdata,.data,.CRT,PAGE,INIT,.rsrc,.reloc, Alidevice [A ] 8. c:\windows\system32\drivers\alidevice.sys alipay.com Windows NT alipay kernel module .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, AmdK8 [A ] 9. c:\windows\system32\drivers\amdk8.sys Advanced Micro Devices AMD Processor Driver .text,.rdata,.data,PAGE,PAGELK,INIT,.rsrc,.reloc, DCN530 [A ] 10. c:\windows\system32\drivers\dcn530n5.sys Digitalchina Networks Limited. DigitalChina DCN-530TX Fast Ethernet Adapter WinXP Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, ialm [A ] 11. c:\windows\system32\drivers\ialmnt5.sys Intel Corporation Intel Graphics Miniport Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, Nokia USB Generic [A ] 12. c:\windows\system32\drivers\nmwcdc.sys Nokia Nokia USB Phone Generic Client .text,.rdata,.data,INIT,.rsrc,.reloc, Nokia USB Modem [A ] 13. c:\windows\system32\drivers\nmwcdcm.sys Nokia Nokia USB Phone Modem Client .text,.rdata,.data,INIT,.rsrc,.reloc, Nokia USB Phone Parent [A ] 14. c:\windows\system32\drivers\nmwcd.sys Nokia Nokia USB Phone Bus Driver .text,.rdata,.data,PAGESRP0,INIT,.rsrc,.reloc, Nokia USB Port [A ] 15. c:\windows\system32\drivers\nmwcdcj.sys Nokia Nokia USB Phone Modem Client .text,.rdata,.data,INIT,.rsrc,.reloc, NPF [A ] 16. c:\windows\system32\drivers\npf.sys Politecnico di Torino NPF Driver - TME extensions .text,.rdata,.data,INIT,.rsrc,.reloc, npkcrypt [A ] 17. c:\program files\qq2006\npkcrypt.sys nvmpu401 [A ] 18. c:\windows\system32\drivers\nvmpu401.sys NVIDIA Corporation NVIDIA? nForce(TM) MPU401 Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, RsAntiSpyware [A ] 19. c:\windows\system32\drivers\rsboot.sys Beijing Rising Technology Co., Ltd. Anti-RootKit Driver .text,.rdata,.data,INIT,.rsrc,.reloc, SafeBoxKrnl [A ] 20. c:\program files\360safebox\safeboxkrnl.sys 奇虎网 360安全卫士 - 保险箱 .text,.rdata,.data,INIT,.rsrc,.reloc, Secdrv [A ] 21. c:\windows\system32\drivers\secdrv.sys Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. Macrovision SECURITY Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, WudfPf [A ] 22. c:\windows\system32\drivers\wudfpf.sys Microsoft Corporation Windows Driver Foundation - User-mode Driver Framework Platform Driver .text,.rdata,.data,PAGE,.edata,INIT,.rsrc,.reloc, WudfRd [A ] 23. c:\windows\system32\drivers\wudfrd.sys Microsoft Corporation Windows Driver Foundation - User-mode Driver Framework Reflector .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, ZSMC301b [A ] 24. c:\windows\system32\drivers\usbvm31b.sys VM Video streaming and Capture Device Driver .text,.data,PAGECONS,INIT,.rsrc,.reloc, ZSMC302 [A ] 24. c:\windows\system32\drivers\usbvm31b.sys VM Video streaming and Capture Device Driver .text,.data,PAGECONS,INIT,.rsrc,.reloc, + IE浏览器加载模块 + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects {01443AEC-0FD1-40fd-9C87-E93D1494C233} [A ] 25. d:\program files\thunder network\thunder\comdlls\tdatonce_now.dll Thunder Networking Technologies,LTD 迅雷浏览器高级特性支持模块 .text,.rdata,.data,.rsrc,.reloc, {889D2FEB-5411-4565-8998-1DD2C5261283} [A ] 26. d:\program files\thunder network\thunder\comdlls\xunleibho_now.dll Thunder Networking Technologies,LTD XunLeiBHO .text,.rdata,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions Exec [A ] 27. d:\program files\thunder network\thunder\thunder.exe Thunder Networking Technologies,LTD .text,.rdata,.data,.rsrc, + 资源管理器加载模块 + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter text/xml [A ] 28. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll Microsoft Corporation Microsoft Office XML MIME Filter .text,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers {F9DB5320-233E-11D1-9F84-707F02C10627} [A ] 29. c:\program files\common files\adobe\acrobat\activex\pdfshell.dll Adobe Systems, Inc. PDF Shell Extension .text,.orpc,.rdata,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved HyperTerminal Icon Ext [A ] 30. c:\windows\system32\hticons.dll Hilgraeve, Inc. HyperTerminal Applet Library .text,.data,.rsrc,.reloc, WinRAR shell extension [A ] 31. c:\program files\winrar\rarext.dll .text,.data,.tls,.idata,.edata,.rsrc,.reloc, Microsoft Office HTML Icon Handler [A ] 32. c:\program files\microsoft office\office11\msohev.dll Microsoft Corporation Microsoft Office 2003 component .text,.data,.rsrc,.reloc, Web Folders [A ] 33. c:\program files\common files\microsoft shared\web folders\msonsext.dll Microsoft Corporation Microsoft Web Folders .text,.data,.rsrc,.reloc, Portable Media Devices [A ] 34. c:\windows\system32\audiodev.dll Microsoft Corporation Portable Media Devices Shell Extension .text,.data,.rsrc,.reloc, Portable Devices [A ] 35. c:\windows\system32\wpdshext.dll Microsoft Corporation Portable Devices Shell Extension .text,.data,.rsrc,.reloc, Portable Devices Menu [A ] 35. c:\windows\system32\wpdshext.dll Microsoft Corporation Portable Devices Shell Extension .text,.data,.rsrc,.reloc, EncryptFile [A ] 36. d:\program files\wopti\woptiencryptmodule.dll 共软网络 Wopti 文件加密右键模块 CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc, PhoneBrowser [AM] 37. f:\program files\nokia\nokia pc suite 6\phonebrowser.dll Nokia Phone Browser .text,.rdata,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A} [A ] 38. c:\windows\system32\shlhook.dll Beijing Rising Technology Co., Ltd. shlhook Module .text,.rdata,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad WPDShServiceObj [AM] 39. c:\windows\system32\wpdshserviceobj.dll Microsoft Corporation Windows Portable Device Shell Service Object .text,.data,.rsrc,.reloc, + 用户登陆自运行项目 + HKLM\Software\Microsoft\Windows\CurrentVersion\Run runeip [AM] 40. d:\program files\rising\antispyware\runiep.exe Beijing Rising Technology Co., Ltd. Rising AntiSpyware Monitor .text,.rdata,.data,.rsrc, + 映像劫持 + HKCR\.html htmlfile\Edit\Command [A ] 41. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.rsrc, + HKCR\.htm htmlfile\Edit\Command [A ] 41. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.rsrc, + 程序初始化和已知动态连接库 + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows AppInit_DLLs [AM] 42. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 其他自启动项目 + AdbeRdr810_zh_CN.exe [A ] 43. d:\adberdr810_zh_cn.exe .nos,.text,.rsrc, Windows清理助手 V2.7.0.8.0415.exe [A ] 44. d:\windows清理助手 v2.7.0.8.0415.exe www.arswp.com CODE,DATA,BSS,.idata,.tls,.rdata,.reloc,.rsrc, + AdbeRdr810_zh_CN.exe [A ] 43. d:\adberdr810_zh_cn.exe .nos,.text,.rsrc, Windows清理助手 V2.7.0.8.0415.exe [A ] 44. d:\windows清理助手 v2.7.0.8.0415.exe www.arswp.com CODE,DATA,BSS,.idata,.tls,.rdata,.reloc,.rsrc, + 正在运行的进程 + 00000160(352) alg.exe 10000000[00020000] [AM] 42. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 000001ac(428) smss.exe + 000001e8(488) csrss.exe + 00000200(512) winlogon.exe 10000000[00020000] [AM] 42. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 45. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, + 00000230(560) services.exe 47260000[0000F000] [ M] 46. c:\windows\apppatch\acadproc.dll Microsoft Corporation Windows Compatibility DLL .text,.data,.rsrc,.reloc, 10000000[00020000] [AM] 42. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 0000023c(572) lsass.exe 10000000[00020000] [AM] 42. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 000002dc(732) svchost.exe 10000000[00020000] [AM] 42. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 0000030c(780) svchost.exe 10000000[00020000] [AM] 42. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 00000354(852) svchost.exe 10000000[00020000] [AM] 42. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 000003d4(980) svchost.exe 10000000[00020000] [AM] 42. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 00000414(1044) svchost.exe 10000000[00020000] [AM] 42. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 000004e0(1248) Explorer.EXE 10000000[00020000] [AM] 42. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, 164A0000[00023000] [AM] 39. c:\windows\system32\wpdshserviceobj.dll Microsoft Corporation Windows Portable Device Shell Service Object .text,.data,.rsrc,.reloc, 016B0000[00085000] [AM] 37. f:\program files\nokia\nokia pc suite 6\phonebrowser.dll Nokia Phone Browser .text,.rdata,.data,.rsrc,.reloc, 01740000[0008C000] [ M] 47. f:\program files\nokia\nokia pc suite 6\pcscm.dll Nokia PCSCM .text,.data,.rsrc,.reloc, 017D0000[0003F000] [ M] 48. c:\windows\system32\connapi.dll Nokia. Nokia Connectivity API .text,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 49. c:\windows\system32\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 50. c:\windows\system32\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 01920000[00008000] [ M] 51. f:\program files\nokia\nokia pc suite 6\lang\phonebrowser_chi-sc.nlr Nokia Nokia Phone Browser language resources .rdata,.data,.rsrc,.reloc, 01930000[0008B000] [ M] 52. f:\program files\nokia\nokia pc suite 6\resource\phonebrowser_nokia.ngr Nokia Nokia Phone Browser graphics resources .rdata,.data,.rsrc,.reloc, 109C0000[0002C000] [ M] 53. c:\windows\system32\portabledevicetypes.dll Microsoft Corporation Windows Portable Device (Parameter) Types Component .text,.orpc,.data,.rsrc,.reloc, 10930000[00049000] [ M] 54. c:\windows\system32\portabledeviceapi.dll Microsoft Corporation Windows Portable Device API Components .text,.orpc,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 45. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, + 000005a0(1440) runiep.exe 00400000[00020000] [AM] 40. d:\program files\rising\antispyware\runiep.exe Beijing Rising Technology Co., Ltd. Rising AntiSpyware Monitor .text,.rdata,.data,.rsrc, 7C140000[00103000] [ M] 55. d:\program files\rising\antispyware\mfc71.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 56. d:\program files\rising\antispyware\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 10000000[00020000] [AM] 42. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 000005a8(1448) ctfmon.exe 10000000[00020000] [AM] 42. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 0000065c(1628) Ras.exe 00400000[001FF000] [ M] 57. d:\program files\rising\antispyware\ras.exe Beijing Rising Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc, 7C140000[00103000] [ M] 55. d:\program files\rising\antispyware\mfc71.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 56. d:\program files\rising\antispyware\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 58. d:\program files\rising\antispyware\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 10000000[00013000] [ M] 59. d:\program files\rising\antispyware\topsoft.dll Beijing Rising Technology Co., Ltd. Rising AntiSpyware TopSoft .text,.rdata,.data,.rsrc,.reloc, 00370000[00032000] [ M] 60. d:\program files\rising\antispyware\ncomm.dll Beijing Rising Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 00BE0000[00020000] [AM] 42. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, 01000000[0014D000] [ M] 61. d:\program files\rising\antispyware\rasgui.dll Beijing Rising Technology Co., Ltd. RasGUI .text,.rdata,.data,.rsrc,.reloc, 23800000[00022000] [ M] 62. d:\program files\rising\antispyware\rsxml.dll Beijing Rising Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 03060000[00018000] [ M] 63. d:\program files\rising\antispyware\ktrojan.dll Beijing Rising Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 03090000[0002F000] [ M] 64. d:\program files\rising\antispyware\engine.dll Beijing Rising Technology Co., Ltd. kaka engine .text,.rdata,.data,.rsrc,.reloc, 030D0000[00041000] [ M] 65. d:\program files\rising\antispyware\rsdialog.dll Beijing Rising Technology Co., Ltd. Rsdiaglo DLL .text,.rdata,.data,.rsrc,.reloc, 03130000[00024000] [ M] 66. d:\program files\rising\antispyware\scanunv.dll Beijing Rising Technology Co., Ltd. .text,.rdata,.data,.rsrc,.reloc, 03180000[0001F000] [ M] 67. d:\program files\rising\antispyware\secscan.dll Copyright(c) 1998-2006 Beijing Rising Technology Corporation Limited SecScan Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 03020000[00015000] [ M] 68. d:\program files\rising\antispyware\secex.dll Copyright(c) 1998-2006 Beijing Rising Technology Corporation Limited SecScanE Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 03770000[00012000] [ M] 69. d:\program files\rising\antispyware\zip.dll rising zip UPX0,UPX1,.rsrc, + 000006c8(1736) svchost.exe 10000000[00020000] [AM] 42. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc,